JA4 TLS client fingerprint

t13i1515h2_8daaf6152771_02713d6af862

Seen 2026-02-19 to 2026-07-28 across the retained window.

Open in lookup →

78

Source IPs

21

Networks

10

Countries

7.4K

Ports hit

134.8K

Events

4

IPs / network

Top networks

AS9808 China Mobile Communications Group Co., Ltd.28 IPs6.1K

AS45102 Alibaba US Technology Co., Ltd.19 IPs10.4K

AS4134 Chinanet4 IPs110.3K

AS60068 Datacamp Limited4 IPs1.9K

AS11878 tzulo, inc.3 IPs2.0K

AS202425 IP Volume inc3 IPs177

AS63473 HostHatch, LLC2 IPs1.9K

AS396982 Google LLC2 IPs2

AS63018 Dedicated.com1 IPs1.7K

AS197706 Keminet SHPK1 IPs105

AS39351 31173 Services AB1 IPs52

AS9009 M247 Europe SRL1 IPs33

Countries

CN 32US 31NL 4CA 4UA 2GB 1AL 1PL 1SI 1DE 1

Ports targeted

443/tcp 313 1433/tcp 257 3306/tcp 240 27017/tcp 236 3389/tcp 208 22/tcp 148 6379/tcp 122 8443/tcp 119 9443/tcp 103 10005/tcp 101 49502/tcp 100 49665/tcp 99

Source IPCCNetworkEvents

123.160.223.75CNAS4134 Chinanet28.3K

123.160.223.74CNAS4134 Chinanet28.3K

123.160.223.73CNAS4134 Chinanet26.9K

123.160.223.72CNAS4134 Chinanet26.7K

185.126.82.201USAS63473 HostHatch, LLC1.9K

198.44.137.54USAS11878 tzulo, inc.1.8K

121.127.42.69USAS60068 Datacamp Limited1.8K

167.160.95.118CAAS63018 Dedicated.com1.7K

47.254.76.66USAS45102 Alibaba US Technology Co., Ltd.602

47.88.18.245USAS45102 Alibaba US Technology Co., Ltd.590

47.77.220.146USAS45102 Alibaba US Technology Co., Ltd.587

47.251.88.238USAS45102 Alibaba US Technology Co., Ltd.581

47.251.118.89USAS45102 Alibaba US Technology Co., Ltd.580

47.89.195.183USAS45102 Alibaba US Technology Co., Ltd.580

47.251.186.126USAS45102 Alibaba US Technology Co., Ltd.577

47.251.188.82USAS45102 Alibaba US Technology Co., Ltd.556

47.251.24.105USAS45102 Alibaba US Technology Co., Ltd.555

47.89.246.29USAS45102 Alibaba US Technology Co., Ltd.553

47.77.223.127USAS45102 Alibaba US Technology Co., Ltd.544

47.251.90.48USAS45102 Alibaba US Technology Co., Ltd.536

About this fingerprint

JA4 is a fingerprint of the TLS Client Hello: the version, cipher suites, extensions and signature algorithms a client offers when it opens an HTTPS connection. Clients built on the same library and version produce the same JA4, which makes it a durable handle on the tool behind the traffic.